🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: minidoctor.org
Domain registrar:Isimtescil Bilisim -
Domain registration date:2016-09-14 21:48:49 UTC
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2023-09-21 16:38:21 UTC
Total malware sites :5
Online malware sites :0 (0%)
Offline Malware sites :5 (100%)
A record(s) observed :9

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-03-21 21:25:23 178.63.26.166static.166.26.63.178.clients.your-server.deNot listedAS24940 HETZNER-AS- DEno
2023-09-21 16:38:24 188.114.96.3Not listedAS13335 CLOUDFLARENETn/ano
2023-09-21 16:38:24 188.114.97.3Not listedAS13335 CLOUDFLARENETn/ano
2025-04-28 07:55:35 104.21.68.191Not listedAS13335 CLOUDFLARENETn/ano
2025-04-28 07:55:35 172.67.198.9Not listedAS13335 CLOUDFLARENETn/ano
2023-09-21 17:15:51 188.114.96.9Not listedAS13335 CLOUDFLARENETn/ano
2023-09-21 17:15:51 188.114.97.9Not listedAS13335 CLOUDFLARENETn/ano
2023-11-07 02:06:21 188.114.96.0SBL699689AS13335 CLOUDFLARENETn/ano
2023-11-07 02:06:21 188.114.97.0Not listedAS13335 CLOUDFLARENETn/ano

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2023-10-19 15:24:13https://minidoctor.org/ee/OfflineIcedID ext PDF TA577 TR 0x48215333
2023-09-26 15:10:21https://minidoctor.org/onme/OfflineIcedID ext PDF pw341 TR 0x48215333
2023-09-26 10:04:09https://minidoctor.org/um/OfflineDarkGate ext IcedID ext USA xll zip Cryptolaemus1
2023-09-21 16:38:30https://minidoctor.org/irv/OfflineDarkGate ext PDF USA xll Cryptolaemus1
2023-09-21 16:38:24http://minidoctor.org/irv/OfflineDarkGate ext PDF USA xll Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2023-10-19 15:30:492e24cac64fd988a92dab83e0b8d8b3612af2f61bd7a70a5f8923fe76284d7743zip  
2023-10-19 15:24:1385b75ccd2b7ee4bb12a98a567bb24c9f52d08f0bd8a7a33cfa00856e11d5260ezip  
2023-09-28 15:23:304312f88082e572efa3554a31b6780ec58ef0ac302b8a277697905b5b2122a927zip  
2023-09-28 03:21:137816e85b02dcd342b08ad43b99e09fd82e843251daab4f532fddbaa13419951bzip  
2023-09-27 18:18:3689b49328a6ba7f13f45ef3977de95a6d98b7d3825047b911e99f1bc07d5ef037zip  
2023-09-27 15:54:07372b98705aa11ccdbaf904c19aaf7735746d39a5e1fe8fb767f81b1bf13ae663zip  
2023-09-27 15:19:05a3175dd166a69a854a6e2c562f85aaa94779b0836ca2a32424061a3673eae0b1zip  
2023-09-27 13:47:073809efb2ff9daf0d0c972b57a02e9155ffbd57f6e864b9482436884a6c808e50zip  
2023-09-27 12:34:3948eeceb3a0b0422eaf5ac55d5cb7640015ab08cf3f20858b060e6526a04a244czip  
2023-09-27 09:53:136e867b3c23a8ee185eae57fc28394a0f26bc921243985f3b74204e6196709cfbzip  
2023-09-27 03:18:332a88c23a7d08262283d563c8867008fef6cbada715adc45c2d55e8df2aad778ezip  
2023-09-26 18:00:4314d556b897f2756da65a1e46e036c60ec8b6108d547017eb6c2d3394a87962cbzip  
2023-09-26 15:48:07198de961721f90ee91f9f520a5c98a4bb4ea457b8f7307ed183049d68bc6e954zip  
2023-09-26 15:15:31826794da6ee21bc06d5444051a4f60cddb0480b0cab0c9cfe4e19f9a02aef207zip  
2023-09-26 15:10:214adeb4205264527326c61f7e816fa91b5ebffcbaf826870035f48ffc909f6c67zip  
2023-09-26 14:55:00919e56f4d080a343123c1aef19b70e6f5cb5bffc9724de705d945ff48b30aeefzip  
2023-09-26 13:53:14af997847779cd259118ccb3a64ad0f0a4b511d661c5b5cdc6294e633ab913a4dzip  
2023-09-26 11:19:53846bf74fa9342b4ad710685cfb30ad200170eb66e224abfda8326c3c41a3afc2dll IcedID
2023-09-22 06:52:19091b7c16791cf976e684fe22ee18a4099a4e26ec75fa145b85dd14603b466b00dll DarkGate
2023-09-22 06:36:3998c59262ad396b4da5b0a3e82f819923f860e974f687c4fff9b852f25a56c50fdllDarkGate
2023-09-21 21:26:57305de78353b0d599cd40a73c7e639df7f5946d1fc36691c8f7798a99ee6835e7dll DarkGate
2023-09-21 21:22:46392fd4d218a8e333bc422635e48fdfae59054413c7a6be764c0275752d45ab23dll DarkGate
2023-09-21 21:03:07305de78353b0d599cd40a73c7e639df7f5946d1fc36691c8f7798a99ee6835e7dll DarkGate
2023-09-21 18:39:08091b7c16791cf976e684fe22ee18a4099a4e26ec75fa145b85dd14603b466b00dll DarkGate
2023-09-21 17:36:41392fd4d218a8e333bc422635e48fdfae59054413c7a6be764c0275752d45ab23dll DarkGate
2023-09-21 17:15:50cc044e49c84f181d6d826e64097ce656144c47ff053328576c643dd9e461e326zip  
2023-09-21 16:59:5298c59262ad396b4da5b0a3e82f819923f860e974f687c4fff9b852f25a56c50fdllDarkGate
2023-09-21 16:38:3027ec297e1fc34e29963303782ff881e74f8bd4126f4c5be0c4754f745d85f79adll DarkGate
2023-09-21 16:38:23936159194eb4556c0a4e146e9aca2abd458330c921c473e95fffe07fd3a7bc01dll DarkGate